Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: UqP5Ek4CSId4U1rBL8OA5UfOnnwIov13kSxqrKj71xM=
Subject key identifier: DD:9A:A1:4E:33:41:A2:FC:E5:AF:20:B0:CE:59:66:E7:25:1F:6B:AF
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 019D37C02F1EF553B35786E2005049220753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: JMihaMAdn0ZWhahng99-PNdrUaY.roa (hash: csBLW4NyC54K0QK0MKH2YJqzIewsSYbBszldoM71OBA=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: vBMwU7q8D3llRdji84PAPwRar8gzx32DP2Z8Jc2uYhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2f:1e:f5:53:b3:57:86:e2:00:50:49:22:07:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=dd9aa14e3341a2fce5af20b0ce5966e7251f6baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:3e:11:1b:1e:fb:f7:35:53:2c:61:10:56:
64:12:3b:3f:d6:0f:64:93:e7:dd:e3:6d:de:aa:a0:
7e:57:86:a8:be:46:34:be:2d:07:60:3b:98:30:40:
e1:ba:1e:ed:ec:b8:5b:af:b1:75:2a:74:49:2c:f1:
fa:61:e9:c6:f4:d1:fc:10:b9:b9:58:bc:1b:6d:09:
1e:87:21:0f:af:46:ba:b6:f6:00:6b:10:a1:b9:a4:
4f:dd:1e:ea:c4:c8:de:d0:a3:3a:11:26:18:19:80:
5f:3d:cf:34:6a:de:07:c6:ab:6e:be:1d:05:aa:ac:
7f:b2:79:7b:22:3d:b1:4a:87:64:63:4b:ea:85:1d:
8f:b3:43:1a:8d:4d:f0:23:f1:10:2b:ee:1a:fd:02:
dc:5d:59:59:8f:84:fd:c7:09:f5:14:5e:36:e3:0d:
a6:7f:23:7b:73:cf:0e:de:c8:5c:b2:0e:bb:52:e9:
e3:bb:fe:0f:d4:8b:03:d8:42:f3:e2:4f:1f:8d:b4:
b3:94:7f:e9:a9:37:c7:95:b7:4e:55:25:b1:35:00:
0d:80:6e:a0:54:c2:c6:a5:ad:15:1c:80:a3:8e:71:
b1:7c:49:dc:5b:ab:8d:bd:a6:62:87:43:aa:60:3a:
41:9e:bb:25:db:ba:c8:a5:90:c0:70:76:0a:06:f8:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:A1:4E:33:41:A2:FC:E5:AF:20:B0:CE:59:66:E7:25:1F:6B:AF
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cd:00:83:b5:ab:52:d0:b4:c4:f5:2c:b9:78:63:b8:74:0f:
c1:14:7f:bf:d3:c8:b2:b5:9c:30:e3:9b:0c:8f:6e:84:ea:19:
9c:13:b3:8e:20:cf:75:44:f2:e0:61:f9:aa:01:91:d4:b5:ac:
be:94:5e:79:3b:65:5b:85:c2:2d:b3:66:d3:11:0e:bb:39:fc:
f7:29:06:82:99:a0:85:13:2a:cc:5c:be:42:44:51:b9:60:ec:
80:72:7b:44:c7:cf:ff:dd:1f:f3:c3:ac:5b:b6:7b:9d:86:17:
93:fc:f2:79:99:05:61:dd:e2:a2:a9:6f:a9:fa:fe:9c:d2:79:
c6:2c:88:4a:67:97:91:d2:63:50:1c:18:c7:a4:f1:28:88:c2:
6f:2d:1c:25:70:df:1e:29:f1:c2:6e:20:9d:44:a5:b6:fd:29:
d3:a2:b4:dc:5d:89:a2:1f:ca:91:3c:e2:64:05:72:5b:b2:34:
d3:2c:2b:8f:a5:ea:b2:04:6b:38:1a:e7:ca:fa:0d:cc:b9:92:
65:a8:3a:0e:0a:85:0d:dd:08:cf:de:1c:38:86:d2:b1:89:a7:
c4:90:d9:73:89:b8:2e:a5:e0:33:57:96:3e:f6:3b:6e:35:23:
13:4e:ec:0c:7d:76:f3:3f:23:39:52:71:b9:7a:5f:e2:e0:c1:
a8:88:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:02 2026 by rpki-client